[bugtraq] Thread Index

• Chronological Index · RSS feed

• [ MDKSA-2007:061 ] - Updated mplayer packages to address buffer overflow vulnerability, security   (March 13, 2007)
• [ MDKSA-2007:062 ] - Updated xine-lib packages to address buffer overflow vulnerability, security   (March 13, 2007)
• CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow, CORE Security Technologies Advisories   (March 13, 2007)
• [ GLSA 200703-11 ] Amarok: User-assisted remote execution of arbitrary code, Raphael Marichez   (March 14, 2007)
• n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation, security   (March 14, 2007)
• n.runs-SA-2007.005 - PHProjekt 5.2.0 - Cross Site Request Forgery, security   (March 14, 2007)
• [SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery, Moritz Muehlenhoff   (March 14, 2007)
• n.runs-SA-2007.004 - PHProjekt 5.2.0 - Cross Site Scripting and Filter Evasion, security   (March 14, 2007)
• n.runs-SA-2007.003 - PHProjekt 5.2.0 - SQL Injection, security   (March 14, 2007)
• [ GLSA 200703-12 ] SILC Server: Denial of Service, Matthias Geerdsen   (March 14, 2007)
• SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal, David Matscheko   (March 14, 2007)
• SymEvent Driver Local Access System Denial of Service, Matousec - Transparent security Research   (March 14, 2007)
• New report on Windows Vista network attack surface, Jim Hoagland   (March 14, 2007)
• Fwd: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability, starcadi starcadi   (March 14, 2007)
• iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability, iDefense Labs   (March 14, 2007)
• [ECHO_ADV_71$2007] AMP v3.2 (base_path) Remote File Inclusion Vulnerability, erdc   (March 14, 2007)
• [ECHO_ADV_72$2007] CARE2X (root_path) Remote File Inclusion Vulnerability, erdc   (March 14, 2007)
• [ECHO_ADV_74$2007] WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability, erdc   (March 14, 2007)
• WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit, UniquE   (March 14, 2007)
• Phishing using IE7 local resource vulnerability, avivra   (March 14, 2007)
  • <Possible follow-ups>
  • Re: Phishing using IE7 local resource vulnerability, robert   (March 15, 2007)
    • RE: Phishing using IE7 local resource vulnerability, avivra   (March 15, 2007)  
     
   
• [ GLSA 200703-13 ] SSH Communications Security's Secure Shell Server: SFTP privilege escalation, Raphael Marichez   (March 14, 2007)
• Woltab Burning Board SQL Injection usergroups.php, x666   (March 14, 2007)
• Horde 3.1.4 (RC1) fixes XSS issue, Moritz Naumann   (March 15, 2007)
• [ECHO_ADV_76$2007] Company WebSite Builder PRO (INCLUDE_PATH) Remote File Inclusion Vulnerability, erdc   (March 15, 2007)
• IBM Rational ClearQuest Web - Cross Site Scripting, james   (March 15, 2007)
• [ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability, erdc   (March 15, 2007)
• Orion-Blog v2.0 Version Remote Privilege Escalation Exploit, UniquE   (March 15, 2007)
• Norton Insufficient validation of 'SymTDI' driver input buffer, Matousec - Transparent security Research   (March 15, 2007)